Overview

overview

10

Static

static

10

fac5e8a9d8...49.exe

windows7-x64

1

fac5e8a9d8...49.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    fac5e8a9d8728b15c44c30ec71097ddbf0e122a7b47bc02a20c7e1dc0a72ff49

  • Size

    986KB

  • MD5

    319d4f11c0d1cddb90b4f06638f2ac31

  • SHA1

    e3aa4ed8c21163e63c7fa97de5c9f9f64828ed56

  • SHA256

    fac5e8a9d8728b15c44c30ec71097ddbf0e122a7b47bc02a20c7e1dc0a72ff49

  • SHA512

    328d930f15708edf69212d817ee0baa172cbca9f01f47b80f08d5776880568681b88cd1d6fc6a8f936d776c2e3a0181947b2f6f177196252ede3ea0eb280ac13

  • SSDEEP

    24576:CsjGHv3eCT878oew4c+qTMfX5bzyiDY8J:ERY8fqTMhzyiM

Score
10/10
pyinstallercobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://144.202.44.90:4444/oHSS

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MALC)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fac5e8a9d8728b15c44c30ec71097ddbf0e122a7b47bc02a20c7e1dc0a72ff49
    .exe windows x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • 1.pyc